CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
8195 | CVE-2003-1371 | Candidate | Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules. | Assigned (20071016) | None (candidate not yet proposed) | View | |
8194 | CVE-2003-1370 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1) the Author field in the Guestbook module, (2) the Titre or Pseudo fields in the Forum module, or (3) "La Tribune Libre" in the Shoutbox module. | Assigned (20071016) | None (candidate not yet proposed) | View | |
8193 | CVE-2003-1369 | Candidate | Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. | Assigned (20071016) | None (candidate not yet proposed) | View | |
8192 | CVE-2003-1368 | Candidate | Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. | Assigned (20071016) | None (candidate not yet proposed) | View | |
8191 | CVE-2003-1367 | Candidate | The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command. | Assigned (20071016) | None (candidate not yet proposed) | View |
Page 19305 of 20943, showing 5 records out of 104715 total, starting on record 96521, ending on 96525